Skip to contentApache Software Foundation Storm Nimbus vulnerabilities
- apache software foundation storm nimbusApache Storm Nimbus: Submitter-Controlled Class Instantiation in Nimbus via a Fail-Open Scheduler Strategy AllowlistCVE-2026-824408.1 High
- apache software foundation storm nimbusApache Storm Nimbus: Path Traversal as the Supervisor User via Unsanitised Blobstore Map Local NameCVE-2026-824277.8 High
- apache software foundation storm nimbus, storm ui +1 moreApache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Daemon Configuration via Nimbus and the UICVE-2026-824336.5 Medium
- apache software foundation storm nimbusApache Storm Nimbus: Blobstore Authorization Bypass via Rebalance Configuration OverridesCVE-2026-824328.1 High
- apache software foundation storm client, storm nimbus +1 moreApache Storm Nimbus, Apache Storm Client: Disclosure of the Topology ZooKeeper Credential to Read-Only Users and to LogsCVE-2026-8243410.0 Critical
- apache software foundation storm nimbusApache Storm Nimbus: Arbitrary File Read on Nimbus via Unvalidated Uploaded Jar LocationCVE-2026-824266.5 Medium
- apache software foundation storm nimbusApache Storm Nimbus: Cross-Tenant Blob Deletion and Cluster Denial of Service via Unvalidated Topology Dependency KeysCVE-2026-824419.1 Critical
- apache software foundation storm nimbus, storm ui +1 moreApache Storm Nimbus, Apache Storm UI: Disclosure of Unredacted Merged Daemon Configuration via the Topology PageCVE-2026-841796.5 Medium